Privacy Policy 💩

01. Quick summary

We built Poop Popper to collect as little as possible. Here is the short version:

The sections below give the full detail.

02. Information we collect

Information you provide

Display name. When you first open the Game, you are asked to choose a short display name (up to 16 letters, numbers, and spaces). The Game suggests a randomly generated name for you, and you can accept it, roll a new one, or type your own. Whatever you choose is saved on your device and stored in our cloud database alongside your game progress, so your profile keeps its name.

You decide what goes in that field. You do not need to use your real name, and we ask you not to: a generated name works exactly as well. If you do type your real name, or anything else that identifies you, that text becomes personal data and is stored as described in this policy. You can change it later, or ask us to delete it, see Your privacy rights and How to delete your data.

The Game does not ask you to create an account, or to give your email address, date of birth, phone number, or any similar personal detail.

If you contact us by email, we receive your email address and whatever information you choose to include in your message, so that we can reply.

Anonymous account and cloud save

To save your progress and let you restore it, the Game signs you in anonymously using Firebase Authentication. This creates a unique anonymous identifier ("anonymous user ID") that is stored on your device. It is not linked to your name, email, or any real-world identity.

Your game progress (for example in-game currency, upgrade levels, achievements, unlocked items, and preferences) is stored on your device and mirrored to a cloud database (Firebase Realtime Database), keyed to your anonymous user ID. This lets your progress persist and be restored on the same install. If the Game cannot reach the cloud, it continues to work and simply keeps your progress on the device.

Information collected automatically

When the Game connects to our backend and app-store services, certain technical data is processed automatically, mostly by our service providers, so the service can function:

• Device and app information, such as device model, operating system version, language, and app version.
• Network information, such as your IP address (used to route requests and for security; it is not used to build an advertising profile).
• Service identifiers generated by Firebase, such as an installation or instance identifier.
• Basic technical logs and timestamps needed to operate, secure, and debug the backend.

Analytics

To understand how the Game is used and to improve it, we use Google Analytics for Firebase. When you play, the Game records analytics events - for example app opens, which features and screens you use, in-game progress and milestones, and crash or error diagnostics - along with the technical device and app information listed above and a Firebase-generated app instance identifier. This tells us, in aggregate, which features are popular, where players get stuck, and whether the Game is stable.

Our analytics is set up to be privacy-protective:

• No advertising identifier. We do not collect the Android Advertising ID (AAID) or Apple's advertising identifier (IDFA), and Firebase Analytics is blocked from accessing them. Your activity is not used to build an advertising or marketing profile.
• No cross-app or cross-site tracking. Analytics data is used only within the Game; it is not combined with data from other apps or websites to track you.
• Coarse location only. Any location is estimated at a country or region level from your IP address for statistics. We do not collect precise or GPS location, and we do not use analytics data to identify you personally.

You can ask us to stop processing your data for analytics - see Your privacy rights.

Purchase information

If you make an in-app purchase, the purchase is processed by the Apple App Store or Google Play. We receive a confirmation of the transaction (for example which product was bought and whether it succeeded) so we can unlock your item. We do not receive or store your payment card number, billing address, or full payment details. Those are handled by Apple and Google under their own privacy policies.

What we do not collect

For clarity, the Game does not collect any of the following:

• Your email address, password, or social-media login.
• Your real name: we only store the display name you choose, whatever you decide that should be.
• Precise or GPS location.
• Your contacts, photos, microphone, or camera.
• Advertising identifiers for cross-app tracking (the Game shows no ads).
• Special categories of data (such as health, religion, or biometric data).

03. How we use information

We use the limited information described above only to:

• Provide and run the Game, including saving, syncing, and restoring your progress.
• Process and deliver your in-app purchases and restore previously bought items.
• Keep the Game secure, prevent fraud and abuse, and enforce our terms.
• Understand how the Game is used, in aggregate, so we can improve features, fix problems, and keep it stable (analytics).
• Diagnose problems, fix bugs, and keep the service reliable.
• Respond to your questions and support requests.
• Comply with our legal obligations (for example keeping purchase records for tax purposes).

We do not use your information for advertising or to build a marketing profile about you, and we do not make automated decisions that produce legal or similarly significant effects about you. Our analytics is aggregated and used only to run and improve the Game.

04. Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases:

05. In-app purchases

The Game offers optional in-app purchases (for example in-game currency packs and one-time upgrades) through Unity In-App Purchasing, using the Apple App Store and Google Play billing systems. All payments are processed by Apple or Google. Your relationship for the payment itself is with the relevant app store, and its terms and privacy policy apply to that transaction. We only receive the result of the purchase so we can grant the item.

06. Third-party services

We use a small number of trusted providers ("processors") to run the Game. These providers may process your data on our behalf, and some may process it on servers outside your country. Each has its own privacy policy.

We use Google Analytics for Firebase for product analytics, as described in the Analytics section. We do not use advertising networks or advertising-based analytics in the Game.

07. How we share information

We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising.

We share information only:

• With the service providers listed above, so they can perform services for us.
• When required by law, legal process, or a valid request from a public authority.
• To protect the rights, safety, and property of ShipCore, our players, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you and any successor will be bound by this policy.

08. International data transfers

Our providers (including Google, Apple, and Unity) may process data on servers located outside the EEA, including in the United States. Where personal data is transferred outside the EEA or the United Kingdom, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent recognized transfer mechanism.

09. Data retention

We keep your data only as long as needed for the purposes described in this policy:

• Cloud-saved game progress is kept while your anonymous account exists, so your progress is available when you play, and until you ask us to delete it.
• Analytics data is retained for a limited period, in line with our Google Analytics for Firebase configuration (by default up to 14 months), after which it is deleted or kept only in aggregated form that does not identify you.
• Local game data stays on your device until you delete the app or clear its data.
• Purchase records may be retained as required for accounting and legal obligations.
• Support emails are kept for as long as needed to handle your request and for a reasonable period afterward.

When data is no longer needed, we delete or anonymize it.

10. Security

We take reasonable technical and organizational measures to protect your information, including access controls on our backend and database security rules that restrict cloud-save data to the matching anonymous user ID. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

11. Your privacy rights

If you are in the EEA or the United Kingdom (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Request portability of data you provided to us, in a machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at hello@shipcore.io. Because the Game uses anonymous accounts, we may need additional information to locate your data (for example your anonymous user ID or device details), and in some cases we may be unable to identify you in our systems, in which case we will tell you.

If you are in the Netherlands, you can contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you are elsewhere in the EEA or the UK, you may contact your local authority.

If you are in California (CCPA and CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect and how we use them.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information, so there is nothing to opt out of.
• Not be discriminated against for exercising your rights.

To make a request, email hello@shipcore.io. We will verify your request using the information reasonably available to us, such as your anonymous user ID.

12. Children's privacy

The Game is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children under the age of 13, or under the age of digital consent in their country (which is 16 in the Netherlands).

If you believe a child has provided us with personal data, please contact us at hello@shipcore.io. If we learn that we have collected personal data from a child in a way that requires parental consent we did not have, we will delete it promptly.

13. How to delete your data

You can remove your data in the following ways:

• In the Game (everything at once): open Settings → MY DATA → DELETE and confirm. This erases your cloud save, deletes your anonymous account, and removes the save on your device. It cannot be undone, and it needs an internet connection so we can reach your cloud record. Golden Rolls you bought cannot be recovered; one-off unlocks stay with your app-store account and return when the shop next connects.
• Local data only: delete the Game from your device, or clear its data in your device settings. This removes the local save on that device but leaves the cloud copy.
• By email: if you cannot use the in-Game option, email hello@shipcore.io and ask us to delete your cloud save. To help us find it, include your anonymous user ID if you have it, or details that help us locate the record.
• Purchase records: these are held by Apple or Google under their own policies; you can manage your purchase history through your app-store account.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the Game or in the law. When we do, we will revise the "Last updated" date at the top. If the changes are significant, we will provide a more prominent notice, such as an in-app message or a note on the app-store listing. We encourage you to review this policy periodically.

15. Governing law

This Privacy Policy and any matter relating to it are governed by the laws of the Netherlands and, where applicable, the EU General Data Protection Regulation, without prejudice to any mandatory consumer-protection rights you have under the law of your country of residence.

16. Contact us

If you have questions, requests, or concerns about this Privacy Policy or your data, contact:

Merknu is established in the Netherlands, so no Article 27 EU representative is required.

If you are in the EEA and believe we have not handled your data lawfully, you may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in your country of residence.